小米盒子4S Pro網(wǎng)上資料比較少,只能自己拆機(jī)查看了
拆機(jī)發(fā)現(xiàn)板子非常簡陋,板子連TF卡槽都取消了,主板上有一個未焊接的3腳焊盤位,應(yīng)該就是TTL,接上測試可以進(jìn)行調(diào)試,系統(tǒng)uboot可以進(jìn)入,系統(tǒng)命令行操作是關(guān)閉的,無法進(jìn)入,不過能進(jìn)入Uboot感覺還是可以玩玩的,說不定可以USB啟動外部系統(tǒng)
簡陋的主板照:
QQ圖片20201118133558.jpg (463.66 KB, 下載次數(shù): 39)
下載附件
保存到相冊
2020-11-18 13:45 上傳
QQ圖片20201118133554.jpg (143.72 KB, 下載次數(shù): 34)
下載附件
保存到相冊
2020-11-18 13:45 上傳
TTL接口,如果沒有啟動信息可能是TX,RX標(biāo)反了,反接一下即可
QQ圖片20201118133549.jpg (390.33 KB, 下載次數(shù): 34)
下載附件
保存到相冊
2020-11-18 13:45 上傳
QQ圖片20201118133541.jpg (222.08 KB, 下載次數(shù): 35)
下載附件
保存到相冊
2020-11-18 13:45 上傳
詳細(xì)的TTL信息:
- SM1:BL:511f6b:81ca2f;FEAT:B0F971B0:20292020;POC:F;RCY:0;EMMC:0;READ:0;0.0;0.0;CHK:0;
- bl2_stage_init 0x01
- bl2_stage_init 0x81
- hw id: 0x0000 - pwm id 0x01
- bl2_stage_init 0xc1
- bl2_stage_init 0x02
- L0:0000000f
- L1:00000700
- L2:00008067
- L3:15000020
- S1:00000000
- B2:20292020
- B1:b0f971b0
- TE: 514704
- BL2 Built : 13:38:54, Oct 10 2020. g12a g92322cd - shuai.wu@xiaomi
- Board ID = 0
- Set cpu clk to 24M
- Set clk81 to 24M
- Use GP1_pll as DSU clk.
- DSU clk: 1200 Mhz
- CPU clk: 1800 MHz
- Set clk81 to 166.6M
- eMMC boot [url=home.php?mod=space&uid=103582]@[/url] 0
- sw8 s
- board id: 0
- Load FIP HDR DDR from eMMC, src: 0x00010200, des: 0xfffd0000, size: 0x00004000, part: 0
- fw parse done
- PIEI prepare done
- 00000000
- emmc switch 1 ok
- 00000000
- emmc switch 2 ok
- NO find ddr boot_info from eMMC
- fastboot data verify
- result: 255
- Cfg max: 12, cur: 1. Board id: 255. Force loop cfg
- DDR4 probe
- LPDDR4_PHY_V_0_1_21-Built : 15:37:51, Mar 26 2020. g12a gf098346 - gongwei.chen@droid11-sz
- ddr clk to 1320MHz
- 00000000
- emmc switch 0 ok
- dmc_version 0001
- Check phy result
- INFO : End of initialization
- INFO : End of read enable training
- INFO : End of fine write leveling
- INFO : ERROR : Training has failed!
- 1D training failed
- Cfg max: 12, cur: 2. Board id: 255. Force loop cfg
- DDR4 probe
- ddr clk to 1320MHz
- dmc_version 0001
- Check phy result
- INFO : End of initialization
- INFO : End of read enable training
- INFO : End of fine write leveling
- INFO : End of read dq deskew training
- INFO : End of MPR read delay center optimization
- INFO : End of Write leveling coarse delay
- INFO : End of write delay center optimization
- INFO : End of read delay center optimization
- INFO : End of max read latency training
- INFO : Training has run successfully!
- 1D training succeed
- Check phy result
- INFO : End of initialization
- INFO : End of 2D read delay Voltage center optimization
- INFO : End of 2D write delay Voltage center optimization
- INFO : Training has run successfully!
- soc_VRef_reg_value 0x 00000032 00000030 0000002b 0000002f 0000002d 0000002d 00000032 0000002f 0000002d 00000030 0000002e 00000030 0000002a 0000002f 00000031 0000002d 00000034 00000031 0000002f 0000002b 0000002e 0000002f 0000002e 00000030 0000002c 0000002c 00000032 00000031 0000002f 0000002a 00000032 0000002f dwc_ddrphy_apb_wr((0<<20)|(2<<16)|(0<<12)|(0xb0):0001
- dram_vref_reg_value 0x 0000001a
- 2D training succeed
- auto size-- 65535DDR cs0 size: 2048MB
- DDR cs1 size: 0MB
- DMC_DDR_CTRL: 0050002cDDR size: 2048MB
- cs0 DataBus test pass
- cs0 AddrBus test pass
- non-sec scramble use zero key
- ddr scramble enabled
- 100bdlr_step_size ps== 440
- result report
- boot times 0Enable ddr reg access
- 00000000
- emmc switch 3 ok
- BL2: rpmb counter: 0x0000001c
- 00000000
- emmc switch 0 ok
- Load FIP HDR from eMMC, src: 0x00010200, des: 0x01700000, size: 0x00004000, part: 0
- Load BL3X from eMMC, src: 0x00078200, des: 0x01768000, size: 0x0013aa00, part: 0
- 0.0;0.0;M3 CHK:0;cm4_sp_mode 0
- [Image: g12a_v1.1.3395-4f61cc3 2020-09-21 11:08:04 shuai.wu@xiaomi]
- OPS=0x03
- ring efuse init
- 2b 0b 03 00 01 11 2a 00 00 11 31 36 41 34 56 50
- [0.050490 Inits done]
- secure task start!
- high task start!
- low task start!
- boot bl31
- NOTICE: BL31: v1.3(release):61f890e5e
- NOTICE: BL31: Built : 15:09:20, Sep 16 2020
- NOTICE: BL31: G12A secure boot!
- NOTICE: BL31: BL33 decompress pass
- INFO: BL3-2: ATOS-V2.4.4-30-g921539e #1 Fri Dec 6 01:21:23 2019 -0700 arm
- INFO: BL3-2: Chip: SM1 Rev: B (2B:B - 0:2)
- INFO: BL3-2: crypto engine DMA
- INFO: BL3-2: secure time TEE
- INFO: BL3-2: CONFIG_DEVICE_SECURE 0xb200000e
- U-Boot 2015.01-g6223619 (Oct 19 2020 - 14:52:47), Build: jenkins-uboot_frozen_release-2
- DRAM: 1 GiB
- Relocation Offset is: 36d89000
- mmu cfg end: 0x40000000
- mmu cfg end: 0x40000000
- register usb cfg[0][1] = 0000000037ea4890
- gpio: pin GPIOAO_11 (gpio 11) value is 1
- InUsbBurn
- wait for phy ready count is 0
- noSof
- sof timeout, reset usb phy tuning
- gpio: pin GPIOX_6 (gpio 86) value is 1
- MMC: aml_priv->desc_buf = 0x0000000033d7a0c0
- aml_priv->desc_buf = 0x0000000033d7c400
- SDIO Port B: 0, SDIO Port C: 1
- co-phase 0x3, tx-dly 0, clock 400000
- co-phase 0x3, tx-dly 0, clock 400000
- co-phase 0x3, tx-dly 0, clock 400000
- emmc/sd response timeout, cmd8, cmd->cmdarg=0x1aa, status=0x1ff2800
- emmc/sd response timeout, cmd55, cmd->cmdarg=0x0, status=0x1ff2800
- co-phase 0x3, tx-dly 0, clock 400000
- co-phase 0x3, tx-dly 0, clock 40000000
- [set_emmc_calc_fixed_adj][875]find fixed adj_delay=20
- init_part() 297: PART_TYPE_AML
- [mmc_init] mmc init success
- aml log : R2048 check pass!
- Amlogic multi-dtb tool
- Single dtb detected
- start dts,buffer=0000000001000000,dt_addr=0000000001000000
- get_partition_from_dts() 92: ret 0
- Amlogic multi-dtb tool
- Single dtb detected
- parts: 17
- 00: logo 0000000000800000 1
- 01: recovery 0000000001800000 1
- 02: misc 0000000000800000 1
- 03: dtbo 0000000000800000 1
- 04: cri_data 0000000000800000 2
- 05: param 0000000001000000 2
- 06: boot 0000000001000000 1
- set has_boot_slot = 0
- 07: rsv 0000000001000000 1
- 08: metadata 0000000001000000 1
- 09: vbmeta 0000000000200000 1
- 10: tee 0000000002000000 1
- 11:factorydata 0000000000a00000 2
- 12: vendor 0000000020000000 1
- 13: system 0000000040000000 1
- 14: product 0000000002000000 1
- 15: cache 0000000020000000 2
- 16: data ffffffffffffffff 4
- init_part() 297: PART_TYPE_AML
- eMMC/TSD partition table have been checked OK!
- crc32_s:0x1577dad == storage crc_pattern:0x1577dad!!!
- crc32_s:0xee152b83 == storage crc_pattern:0xee152b83!!!
- crc32_s:0x79f50f07 == storage crc_pattern:0x79f50f07!!!
- mmc env offset: 0x27400000
- aml log : internal sys error!
- reboot_mode=cold_boot
- amlkey_init() enter!
- [EFUSE_MSG]keynum is 4
- vpu: driver version: v20190313
- vpu: detect chip type: 11
- vpu: clk_level default: 7(666667000Hz), max: 7(666667000Hz)
- vpu: clk_level in dts: 7
- vpu: vpu_power_on
- vpu: set_vpu_clk
- vpu: set clk: 666667000Hz, readback: 666666667Hz(0x100)
- vpu: set_vpu_clk finish
- vpu: vpu_module_init_config
- vpp: vpp_init
- vpp: vpp osd2 matrix rgb2yuv..............
- hdr_func 4, hdr_process_select 0x1
- gpio: pin GPIOH_7 (gpio 38) value is 1
- cvbs: cpuid:0x2b
- cvbs: find performance_pal config
- aml log : internal sys error!
- pll tsensor avg: 0x1f9b, u_efuse: 0x2b
- temp1: 36
- ddr tsensor avg: 0x1f9c, u_efuse: 0x53
- temp2: 37
- device cool done
- hpd_state=0
- do_hpd_detect: hdmimode=2160p60hz
- do_hpd_detect: colorattribute=420,8bit
- Saving Environment to aml-storage...
- mmc env offset: 0x27400000
- Writing to MMC(1)... done
- no sink, fallback to 720p60hz[4]
- hdr mode is 0
- dv mode is ver:0 len: 0
- hdr10+ mode is 0
- read hdmichecksum 0x00000000, colorattribute 420,8bit
- read hdmimode 2160p60hz, colorspace <NULL>, colordepth <NULL>
- do_get_parse_edid: autoMode = false, manualMode=97
- isYuv4KSink: false, maxTMDSRate=150
- do_get_parse_edid: non-yuv4k sink: inColorSpace: HDMI_COLOR_FORMAT_RGB
- do_get_parse_edid: default inColorDepth: HDMI_COLOR_DEPTH_24B
- TV is same, initial mode is: 576cvbs attr: 420,8bit
- dolby_status 0
- dolby_status 0
- dolby_vision_process: no tv and dv disabled
- Saving Environment to aml-storage...
- mmc env offset: 0x27400000
- Writing to MMC(1)... done
- [OSD]load fb addr from dts:/meson-fb
- [OSD]load fb addr from dts:/fb
- [OSD]set initrd_high: 0x7f800000
- [OSD]fb_addr for logo: 0x7f800000
- [OSD]load fb addr from dts:/meson-fb
- [OSD]load fb addr from dts:/fb
- [OSD]fb_addr for logo: 0x7f800000
- [OSD]VPP_OFIFO_SIZE:0xfff01fff
- [CANVAS]canvas init
- [CANVAS]addr=0x7f800000 width=3840, height=2160
- [OSD]osd_hw.free_dst_data: 0,719,0,575
- [OSD]osd1_update_disp_freescale_enable
- vpp: vpp_matrix_update: 2
- cvbs_performance_enhancement
- cvbs_config_hdmipll_g12a
- cvbs_set_vid2_clk
- dolby_status 0
- dolby_status 0
- hdr_packet
- vpp: hdr_policy = 0
- vpp: Rx hdr_info.hdr_sup_eotf_smpte_st_2084 = 0
- s_version: U-Boot 2015.01-g6223619
- Hit Enter or space or Ctrl+C key to stop autoboot -- : 0
- co-phase 0x3, tx-dly 0, clock 40000000
- co-phase 0x3, tx-dly 0, clock 40000000
- co-phase 0x3, tx-dly 0, clock 400000
- emmc/sd response timeout, cmd8, cmd->cmdarg=0x1aa, status=0x1ff2800
- emmc/sd response timeout, cmd55, cmd->cmdarg=0x0, status=0x1ff2800
- co-phase 0x3, tx-dly 0, clock 400000
- co-phase 0x3, tx-dly 0, clock 40000000
- [set_emmc_calc_fixed_adj][875]find fixed adj_delay=20
- init_part() 297: PART_TYPE_AML
- [mmc_init] mmc init success
- switch to partitions #0, OK
- mmc1(part 0) is current device
- do_factorydata_read:204 Can't find out assm_mn from factorydata.
- factorydata - Access the factorydata from Xiaomi Partition
- Usage:
- factorydata argv:
- dump
- read keyname
- write keyname value
- erase keyname
- do_factorydata_read:204 Can't find out loglevel from factorydata.
- factorydata - Access the factorydata from Xiaomi Partition
- Usage:
- factorydata argv:
- dump
- read keyname
- write keyname value
- erase keyname
- do_factorydata_read:204 Can't find out console_enable from factorydata.
- factorydata - Access the factorydata from Xiaomi Partition
- Usage:
- factorydata argv:
- dump
- read keyname
- write keyname value
- erase keyname
- Command: bcb uboot-command
- Start read misc partition datas!
- BCB hasn't any datas,exit!
- do_monitor_bt_cmdline
- USB0: USB3.0 XHCI init start
- Register 3000140 NbrPorts 2
- Starting the controller
- USB XHCI 1.10
- scanning bus 0 for devices... 3 USB Device(s) found
- udev->descriptor.idVendor:0xbda udev->descriptor.idProduct:0xc820
- enumerate rtk usb dev OK usb_port:1
- bt_cmdline: start to download fw
- bt_cmdline: fw downloaded
- rtk_set_wake_polarity, polarity=0
- hci_set_scan_enable
- no recovery mod!
- rc scan end
- [imgread]szTimeStamp[2020102104463406]
- [imgread]secureKernelImgSz=0x91d800
- aml log : R~2048 check pass!
- aml log : R2048 check pass!
- aml log : R2048 check pass!
- avb2: 0
- ee_gate_off ...
- avb2: 0
- ## Booting Android Image at 0x01080000 ...
- Kernel command line: androidboot.dtbo_idx=0 buildvariant=user
- [store]Is good fdt check header, no need decrypt!
- load dtb from 0x1000000 ......
- Amlogic multi-dtb tool
- Single dtb detected
- Loading Kernel Image(COMP_NONE) ... OK
- kernel loaded at 0x01080000, end = 0x01989000
- libfdt fdt_getprop(): FDT_ERR_NOTFOUND
- Loading Device Tree to 0000000009fea000, end 0000000009fffbbc ... OK
- fdt_fixup_memory_banks, reg:0000000000000000
- Starting kernel ...
- uboot time: 10220517 us
- [ 0.000000@0] Linux version 4.9.113-g0ba0888-dirty (jenkins@c5-mitv-bsp-build07.bj) (gcc version 6.3.1 20170109 (Linaro GCC 6.3-2017.02) ) #1 SMP PREEMPT Wed Oct 21 04:30:00 CST 2020
- [ 0.000000@0] Reserved memory: regions without no-map are not yet supported
- [ 0.000000@0] Kernel command line: init=/init console=ttyS0,115200 no_console_suspend earlyprintk=aml-uart,0xff803000 ramoops.pstore_en=1 ramoops.record_size=0x8000 ramoops.console_size=0x4000 hdr_policy=0 hdr_priority= reboot_mode_android=normal logo=osd0,loaded,0x3d800000 vout=576cvbs,enable hdmitx=,420,8bit hdmimode=2160p60hz hdmichecksum=0x00000000 dolby_vision_on=0 frac_rate_policy=1 hdmi_read_edid=1 cvbsmode=576cvbs osd_reverse=0 video_reverse=0 irq_check_en=0 androidboot.firstboot=0 jtag=disable androidboot.hardware=amlogic androidboot.bootloader=U-Boot 2015.01-g6223619 androidboot.build.expect.baseband=N/A androidboot.reboot_mode=cold_boot androidboot.platform_id=216 androidboot.mi.cpu=Cortex-A55 androidboot.mi.gpu=Mali-G31 androidboot.model_name=m23m_00_3f androidboot.provider=amlogic androidboot.serialno=30699800000001836 androidboot.mac=6c:0d:c4:0f:6e:0a quiet root=/dev/mmcblk0p18 ro rootwait skip_initramfs androidboot.selinux=enforcing otg_device=0 androidboot.dtbo_idx=0 build
- [ 0.455892@0] vout: error: invalid vinfo1. current vmode is not supported
- [ 0.457064@0] vout: error: invalid vinfo1. current vmode is not supported
- [ 0.602556@1] meson_cpufreq_init:don't find the node <dynamic_gp1_clk>
- [ 0.606573@1] ff803000.serial: clock gate not found
- [ 0.747851@1] di_get_vpu_clkb: get clk vpu error.
- [ 0.749132@1] get fclk_div5 err
- [ 0.750031@1] vdin_drv_probe: vdin cannot get msr clk !!!
- [ 0.755758@1] get fclk_div5 err
- [ 0.758555@1] vdin_drv_probe: vdin cannot get msr clk !!!
- [ 0.768861@1] pixel_probe: vpp probe func error!
- [ 0.810889@0] cectx ff80023c.aocec: not find 'port_num'
- [ 0.810936@0] cectx ff80023c.aocec: no hdmirx regs
- [ 0.815271@0] cectx ff80023c.aocec: no hhi regs
- [ 0.821827@0] cectx ff80023c.aocec: wakeup_reason:0x0
- [ 0.857197@0] request_irq error ret=-22
- [ 0.857258@0] dev_pm_set_wake_irq failed: -22
- [ 0.861218@0] page_trace_module_init, create sysfs failed
- [ 0.866034@0] defendkey ff630218.defendkey: Reserved memory is not enough!
- [ 1.089421@0] asoc-aml-card auge_sound: control 2:0:0:I2SIn CLK:0 is already present
- [ 1.091526@0] snd_tdm ff660000.audiobus:tdm@1: ASoC: Failed to add I2SIn CLK: -16
- [ 1.098990@0] aml_dai_tdm_probe, failed add snd tdm controls
- [ 1.104626@0] asoc-aml-card auge_sound: control 2:0:0:I2SIn CLK:0 is already present
- [ 1.112379@0] snd_tdm ff660000.audiobus:tdm@2: ASoC: Failed to add I2SIn CLK: -16
- [ 1.119799@0] aml_dai_tdm_probe, failed add snd tdm controls
- [ 1.[ 1.590270@3] EXT4-fs (mmcblk0p18): couldn't mount as ext3 due to feature incompatibilities
- [ 1.623333@3] usb 1-1: Unsupported device
- [ 1.623707@3] usb 1-1: Unsupported device
- [ 1.626047@3] usb 1-1: Unsupported device
- [ 1.878156@2] init: waitid failed: No child processes
- [ 1.878230@2] init: get_model_name: Model Name -> m23m_00_3f
- [ 1.883446@2] init: get_model_property_ini : INI load file error, use default file
- [ 2.055145@3] ueventd: /vendor/ueventd.rc: 110: /sys/ lines must have 5 entries
- [ 3.626765@3] Amlogic A/V streaming port init
- [ 4.418508@3] android.hardware.health@2.0-impl: wakealarm_init: timerfd_create failed
- [ 12.760974@2] init: Boot Completed !!!
- [ 12.761842@2] inyt: Can't create : File exists
- [ 13.976602@2] rtk_btusb: reset_controller
- [ 15.619288@0] rtk_btusb: btchr_ioctl:Failed with wrong Cmd:1074021809
- [ 21.074753@2] init: No such service 'bdupdate' for ctl.stop
- [ 21.078214@3] init: No such service 'sensord' for ctl.stop
復(fù)制代碼
|